This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/KVZFkRvGPP0yqbZqOYiOhPf6hCE.roa File: KVZFkRvGPP0yqbZqOYiOhPf6hCE.roa (raw, json) Hash identifier: yRXkEjZXTv9c+ruN8Kwk45soo6zHkb2f8NZC0Tvv4IQ= Subject key identifier: 29:56:45:91:1B:C6:3C:FD:32:A9:B6:6A:39:88:8E:84:F7:FA:84:21 Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf Certificate serial: 018FDD5E2C805A295DD17CD706A121E3DBC4 Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/KVZFkRvGPP0yqbZqOYiOhPf6hCE.roa Signing time: Mon 03 Jun 2024 09:11:27 +0000 ROA not before: Mon 03 Jun 2024 09:11:27 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 2121 IP address blocks: 193.0.24.0/21 maxlen: 21 2001:67c:64::/48 maxlen: 48 Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 01:8f:dd:5e:2c:80:5a:29:5d:d1:7c:d7:06:a1:21:e3:db:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf Validity Not Before: Jun 3 09:11:27 2024 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=295645911bc63cfd32a9b66a39888e84f7fa8421 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:32:df:be:f3:e9:3a:95:88:e2:b7:98:6a:23: 92:57:51:c3:5b:9e:1e:8e:7a:e7:d4:ff:a5:c7:a9: af:73:4d:4d:7a:3e:90:b1:86:5f:ac:cc:12:74:39: b8:91:4c:8c:a8:f6:46:66:e6:b1:73:74:5f:16:49: 03:ef:54:c6:e1:ec:d0:1f:6f:22:f5:2c:0b:71:e7: 3c:f3:23:10:61:03:8b:9a:31:71:6b:0b:5d:f0:18: bd:39:82:15:49:b8:53:c2:09:91:ff:bd:94:4e:88: f9:a9:7e:c9:5c:27:32:22:09:d3:45:f8:fb:ae:bb: 36:d5:db:df:7c:3a:7a:bb:a7:1d:0c:fc:49:ca:f6: d9:bb:5c:96:7b:d8:28:94:d3:ef:15:ab:aa:41:c5: 09:c7:6b:40:64:f1:df:9e:f6:8c:44:aa:2a:9e:e3: 2b:b2:c8:34:cb:21:3d:e9:9b:bc:fe:ea:09:c6:58: 0b:3a:03:30:75:81:b4:4d:08:b7:de:61:08:2c:4f: d2:89:f8:d9:12:26:e0:23:fd:d8:d9:eb:79:7d:e4: 8b:74:14:fc:71:1f:7e:e1:65:f9:c5:ef:5f:b9:21: ba:96:c8:5d:42:10:ce:49:1b:1d:4d:27:4c:0a:0e: 76:50:a1:86:92:09:3b:99:14:ee:52:56:b8:12:2e: d9:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:56:45:91:1B:C6:3C:FD:32:A9:B6:6A:39:88:8E:84:F7:FA:84:21 X509v3 Authority Key Identifier: keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/KVZFkRvGPP0yqbZqOYiOhPf6hCE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.0.24.0/21 IPv6: 2001:67c:64::/48 Signature Algorithm: sha256WithRSAEncryption 21:17:17:6b:8c:df:78:a8:31:fc:04:73:01:bd:ce:3d:55:e8: 5b:01:c7:09:b0:57:aa:65:ba:92:e2:1a:57:4a:08:f7:c8:bd: 89:0e:2f:1c:5e:19:34:2d:4e:57:df:2b:78:5b:ed:a2:64:f6: ee:e6:7f:2c:49:77:f1:70:ff:da:0e:77:73:fb:2b:d2:ad:c0: 70:40:cd:a6:a0:c1:b7:75:ac:3d:62:98:87:28:59:5a:00:4f: 9d:65:37:34:87:ba:63:11:96:b8:75:c0:3a:76:50:02:f6:27: 13:0f:93:39:96:e9:bf:06:1b:d2:98:fd:50:05:9d:35:03:1d: 9b:2d:7e:50:58:1a:b1:b9:2e:3e:d9:49:c0:99:e6:45:68:52: a1:06:38:ef:ba:45:1c:33:18:32:32:cc:6b:1f:66:99:e6:06: 6a:db:78:bf:bb:dc:fe:cb:ec:cd:29:db:3f:a9:7e:7b:34:15: 3f:ce:c0:11:2a:fa:32:e6:b1:13:d2:ed:b6:2b:24:88:92:91: 87:44:0d:a1:a5:43:e0:32:3a:13:5b:7a:90:56:2d:7a:76:a6: 05:4b:a8:09:4a:65:00:a2:11:81:ae:66:cf:fe:4d:c2:34:e2: d4:f6:ff:83:e6:fb:2d:44:51:75:ca:8d:c5:04:54:d0:d4:bc: 49:f2:47:6c -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAY/dXiyAWild0XzXBqEh49vEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUyNjIwNDE1ZDI0OTBhNWVjM2Y2OTI1YjlmNzkwNDBlOGUy MmRkYmYwHhcNMjQwNjAzMDkxMTI3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyOTU2NDU5MTFiYzYzY2ZkMzJhOWI2NmEzOTg4OGU4NGY3ZmE4NDIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhDLfvvPpOpWI4reYaiOSV1HDW54e jnrn1P+lx6mvc01Nej6QsYZfrMwSdDm4kUyMqPZGZuaxc3RfFkkD71TG4ezQH28i 9SwLcec88yMQYQOLmjFxawtd8Bi9OYIVSbhTwgmR/72UToj5qX7JXCcyIgnTRfj7 rrs21dvffDp6u6cdDPxJyvbZu1yWe9golNPvFauqQcUJx2tAZPHfnvaMRKoqnuMr ssg0yyE96Zu8/uoJxlgLOgMwdYG0TQi33mEILE/SifjZEibgI/3Y2et5feSLdBT8 cR9+4WX5xe9fuSG6lshdQhDOSRsdTSdMCg52UKGGkgk7mRTuUla4Ei7ZowIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFClWRZEbxjz9Mqm2ajmIjoT3+oQhMB8GA1UdIwQY MBaAFFJiBBXSSQpew/aSW595BA6OIt2/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVW1JRUZkSkpDbDdEOXBKYm4za0VEbzRpM2I4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS8wOTgzN2MtOThmMy00YzlmLWFlYmYt ODgxNDg4ZmZkYmIwLzEvS1ZaRmtSdkdQUDB5cWJacU9ZaU9oUGY2aENFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS8wOTgzN2MtOThmMy00YzlmLWFlYmYtODgxNDg4ZmZkYmIw LzEvVW1JRUZkSkpDbDdEOXBKYm4za0VEbzRpM2I4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBACEXF2uM33ioMfwEcwG9 zj1V6FsBxwmwV6plupLiGldKCPfIvYkOLxxeGTQtTlffK3hb7aJk9u7mfyxJd/Fw /9oOd3P7K9KtwHBAzaagwbd1rD1imIcoWVoAT51lNzSHumMRlrh1wDp2UAL2JxMP kzmW6b8GG9KY/VAFnTUDHZstflBYGrG5Lj7ZScCZ5kVoUqEGOO+6RRwzGDIyzGsf ZpnmBmrbeL+73P7L7M0p2z+pfns0FT/OwBEq+jLmsRPS7bYrJIiSkYdEDaGlQ+Ay OhNbepBWLXp2pgVLqAlKZQCiEYGuZs/+TcI04tT2/4Pm+y1EUXXKjcUEVNDUvEny R2w= -----END CERTIFICATE-----Generated at Mon Dec 15 04:59:29 2025 by rpki-client